@rollup/rollup-linux-riscv64-gnu
Clear release notes and a licensed artifact make this easy to evaluate. The upstream project is active, but workflow findings around template injection and an untrusted checkout warrant CI caution; the package is also not named or mentioned in the linked repository README.
78%
Total Score
100
94
75
100
Health Score Breakdown
All six workflows were analyzed and all 59 action references are pinned, but high-confidence template-injection findings occur in a workflow_run workflow and an untrusted checkout occurs in a pull_request_target workflow; these create CI supply-chain exposure. Low-confidence cache findings and high-confidence ad hoc package installation add smaller hygiene concerns.
The repository name does not match this platform package and its README does not mention it. A name mismatch is normal for a monorepo subpackage, but the absence of both signals leaves package identity less transparent.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 4 days ago
- Created
- 2 years ago
- Unpacked Size
- 1.9 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.